![](/_next/image?url=https%3A%2F%2Ffirebasestorage.googleapis.com%2Fv0%2Fb%2Fflexa-8c4bb.appspot.com%2Fo%2Fimages%252Fcompanies%252F64ff116db7e08de9d7e4091f%252F9n3h8faf18guf7h3rj14z4hjy.png%3Falt%3Dmedia&w=384&q=75)
Job Description
TUI Group is the world’s number one integrated tourism business. TUI is organized in domains existing out of global teams who are supporting and/or driving the business. The IAM product team is part of the Colleague Compute domain and has a strong link with the Security Domain. The team is a multi-disciplinary team of experts across Architecture, Engineering, DevOps and Agile Delivery providing services across the group ex. UK, Ireland, Sweden, Norway, Denmark, Finland, Germany, Belgium and The Netherlands.
At TUI we’re ambitious to become the leader in technology within the travel industry and to achieve this we are looking to build a capable, creative team who want to be a part of accomplishing that goal.
We never stop looking ahead, seeking new ways to delight our customers and grow our business. We recognise the power of digital and the massive contribution this brings to creating a truly unique and differentiated customer experience.
The IAM product team has as goal to deliver IAM as a product. This means that all functions/services within IAM can be received with just a click on button. The business and development teams do not need to worry about IAM tasks and just focus on their delivery. Being able to plugin IAM as a product will reduce their burden and increase IAM security for TUI as a group.
ABOUT THE JOB
As an IAM Engineer you will be responsible for the delivery of new or improved functionalities and assisting with daily operational tasks, within IAM, on platforms as Active Directory, Azure AD, AWS, GCP, etc. You are an active member in a self driving team working together with your colleagues and peers, constantly looking to increase IAM security, improvements & automation with the aim that the IAM product can be received as just a simple click on the button. You will drive, ensure and collaborate with the audit and compliance team assuring all IAM components and solutions are compliant and take corrective measure wherever necessary. You will be actively involved in the IAM programs that will deliver the IAM roadmap like SSO federation, Identity Governance and Administration, Privileged Access Management, etc.
You will engage with teams such as Development, Architecture, Security, Engineering and Operations to come up with optimised IAM solutions.
You will work with resolver teams to ensure that information security events and incidents are automatically generated, appropriately addressed and closed in local ticketing systems and ensure reporting on key performance indicators and service levels.
Our information security team works in collaboration with business and IT teams across our many domains. You adopt a pragmatic and ‘can-do’ attitude in everything you do, partnering with your colleagues across the TUI businesses and IT functions worldwide. You build strong working relationships and influence others to do the right thing to Protect our Smile.
Security is part of everyone’s job. At TUI, we practise secure behaviours first in everything we do.
ABOUT YOU
- Bachelor’s degree in IT, information security, computer science, or a related field.
- 5 to 10 years of experience. Alternatively, candidate may possess an equivalent combination of relevant professional experience and education.
- Proven deep knowledge of Microsoft Azure AD and related services like for example Enterprise Applications, Conditional Access, B2B/B2C accounts, Active Directory and Microsoft 365
- Knowledge of engineering workflows
- Comprehensive knowledge and experience with authentication standards and technologies
- Extensive hands-on knowledge of identity and access management best practices, procedures, and software solutions
- Extensive knowledge and experience with identity and access management technology, such as single sign-on (SSO), two-factor authentication, Conditional Access, privileged access management, etc. in Azure and AWS.
- Experience with Windows, Linux, scripting (Bash, Powershell, Visual basic or Perl), LDAP, SQL, and web services.
- Experience of working with O365 and AWS security capabilities (e.g. Guard Duty…).
- Good interpersonal skills so that you can work well with and influence your information security, and IT operations colleagues from around the world.
- Problem solving skills to identify creative and elegant technical solutions.
- Good communicator and able to work under pressure.
What will you do?
- Integrate and manage applications in cloud federation
- Identify, analyze and resolve system design weaknesses. Troubleshoot and manage the resolution of issues related identities, systems, access, accounts, authentication, authorization, entitlements, and permissions. Determine and recommend the most appropriate response to identified more complex problems, issues and/or defects by assessing impact and prioritization.
- Ensure the maintenance and monitor IAM systems. Troubleshoot, support and resolve system incidents, problems and changes, as required.
- Produce IAM technical documentation such IAM detailed design, configuration guides etc.
- Managing access and permissions where necessary and implementing automated solutions.
- Provide level 2 and level 3 support and troubleshooting and managing issues related to identities, systems access accounts, authentication, authorization, entitlements, and permissions.
- Coach other members of the organization on the best practices that should be followed in identity and access management.
- Stay up-to-date on current IAM threats and industry solutions.
Technology:
- Must have:
- Cloud solutions as AWS, Azure, Google Cloud
- Linux, Windows, AD, LDAP & SQL
- Profound security and IAM knowledge within cloud and system solutions
- Powershell, Java, C#, C/C++, others
- Experience in one of IAM solutions such as: CyberArk, Oracle, ForgeRock, Radius, RSA, PKI, SailPoint, Thycotic, BeyondTrust, Ping Identity
Experience:
• Minimum of 3 years’ experience as IAM engineer
• Can show IAM experience through operations and project deliveries
ABOUT OUR OFFER
- Working in the leading global tourism group: We stand for intercultural cooperation and offer the opportunity to work in international projects and teams.
- Fantastic holiday benefits including discounts, special offers
- Mobile working, flexible working hours and working from abroad: We believe that work is something you do, not where you go. Our offer: TUI Way of Working
- Health and Wellbeing support in five key areas – Health, Social, Community, Career and Financial
- Development and career opportunities: We offer a wide range of digital training and international career opportunities.
- Additional benefits relevant to the local market that you’ll be based in
At TUI, we know people are as diverse as the destinations we send our customers to. We love to see your uniqueness shine through and inspire the future of travel. If you would like to read more about what Diversity & Inclusion means to us simply visit our Smile page Click here
If you have any questions, please contact the Recruiter for this role via the contact information included in the advert.
Please Note: These vacancies will be managed by an International Recruitment Team and therefore your application may be viewed by TUI colleagues outside your home country.
#TUIJobs
Company benefits
Additional employee ratings
(these do not contribute to the FlexScore®)
Working at TUI Group
Company employees
Gender diversity (male:female)
Office locations
Hiring Countries
Austria
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/AT.png)
Belgium
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/BE.png)
Croatia
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/HR.png)
Denmark
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/DK.png)
Dominican Republic
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/DO.png)
Finland
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/FI.png)
France
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/FR.png)
Germany
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/DE.png)
Greece
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/GR.png)
Indonesia
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/ID.png)
Malaysia
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/MY.png)
Mexico
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/MX.png)
Netherlands
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/NL.png)
Norway
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/NO.png)
Portugal
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/PT.png)
Spain
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/ES.png)
Sweden
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/SE.png)
Thailand
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/TH.png)
Tunisia
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/TN.png)
Türkiye
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/TR.png)
United Kingdom
![](https://raw.githubusercontent.com/madebybowtie/FlagKit/master/Assets/PNG/GB.png)
Awards & Achievements
Other jobs you might like
FlexScore®
Remote-firstA little flex timeFlexScore®
Remote-firstA little flex timeFlexScore®
2 days/week at homeA little flex timeFlexScore®
2 days/week at homeCore hours 11–3Dog friendlyFlexScore®
3 days/week at homeFully flexible hoursDog friendly